Download NB model information security policy

2.
Definitions










Authorised User – Any individual who is permitted access to British Library buildings and
systems during the course of their work for the British Library. This includes:
o Permanent staff employed directly by the British Library and on the British Library
Payroll and recruited by Human Resources;
o Third party staff hired indirectly through a third party listed on the British Library’s
preferred supplier list. This includes agency staff;
o Consultants, contractors and other temporary workers engaged indirectly through
procurement contracts;
o Voluntary staff and interns.
Electronic Media – Any device that stores British Library information in digital form. This
includes, but is not limited to:
o Magnetic Media - Hard disk drives (both internal and external), floppy discs,
magnetic tapes (reel, digital, back-up tape etc.);
o Optical Media - CDs and DVDs;
o Solid state memory devices (e.g. Flash media, USB drives, EEPROM etc.);
o Personal digital assistants (PDAs);
o Mobile devices / Tablets.
Hard Copy Media – Any non digital storage medium on which information is physically
recorded in a format suitable for direct use by a human being. This may include, but is not
limited to:
o Paper;
o Microfiche;
o Microfilm.
Information Asset – An Information Asset is a collection of information that has value to
the business of the Library, is organised in some form of structure and is managed as a
single unit, and tends to grow or change over time. Any organised collection of information
containing personal data should automatically be considered to be an Information Asset. An
Information Asset may be stored in the form of a database, a discrete collection of
electronic files, or hard-copy.
Information Asset Owner – Managers held responsible for ensuring that specific
Information Assets are handled and managed appropriately. This means making sure that
Information Assets are properly protected and that their value to the organisation is fully
exploited.
Mobile Device – Smart Phones (e.g. iPhone, Blackberry, Android, Windows Mobile),
Tablets (e.g. iPad, Nexus), PDA’s, mobile phones, and other mobile technology (excluding
laptops) that store, transmit, or process British Library and/or British Library customer
information.
Removable Media – Any easily portable Electronic Media in which information can be
recorded separately from its network or system
Sensitive Information – All Personal Data (as defined by the Data Protection Act 1998),
financial data or information which is likely to be exempt from disclosure under the
Freedom of Information Act 2000
Third Party - Any external organisation or individual who is not a member of the Library
staff, for example service providers, external IT maintenance and support staff, contractors
or consultants. This includes external individuals and agencies not working under the
instruction or on behalf of the Library, such as regulatory authorities and law enforcement
agencies.
Visitor – Any member of the general public who visits the Library premises as a Reader,
customer or guest.
Date issued: 01 July 2014
Review date: 30 June 2015
Version: 2.0
2